|
|
Posted by Gary L. Burnore on 09/01/07 21:28
On Sat, 01 Sep 2007 11:31:19 -0700, Reggie
<joelregisford1@hotmail.com> wrote:
>Am getting these messages.am trying to create an upload file for user
>profile.something like myspace.please help.
>
>
>
>Notice: Use of undefined constant completed - assumed 'completed' in /
>home/fhlinux169/c/clashoff.co.uk/user/htdocs/picture.php on line 17
>
>Notice: Undefined index: completed in /home/fhlinux169/c/
>clashoff.co.uk/user/htdocs/picture.php on line 17
>
>Warning: fopen(../wellimg/ctco.jpg) [function.fopen]: failed to open
>stream: No such file or directory in /home/fhlinux169/c/clashoff.co.uk/
>user/htdocs/picture.php on line 46
>
>Warning: filesize() [function.filesize]: stat failed for ../wellimg/
>ctco.jpg in /home/fhlinux169/c/clashoff.co.uk/user/htdocs/picture.php
>on line 47
>
>Warning: fread(): supplied argument is not a valid stream resource in /
>home/fhlinux169/c/clashoff.co.uk/user/htdocs/picture.php on line 47
>
>Notice: Use of undefined constant gim - assumed 'gim' in /home/
>fhlinux169/c/clashoff.co.uk/user/htdocs/picture.php on line 52
>
>Notice: Undefined index: gim in /home/fhlinux169/c/clashoff.co.uk/user/
>htdocs/picture.php on line 52
For the above, either the files aren/t in /home/f.... or the ID the
web servr is running as (apache, I bet) doesn't have permission to
read them or search to the directoy they're in.
>
>
>This is the script:
>
>
><?php
>
>// Connect to database
>
>$errmsg = "";
>if (! @mysql_connect("localhost","trainee","abc123")) {
> $errmsg = "Cannot connect to database";
> }
>@mysql_select_db("test");
>
>// First run ONLY - need to create table by uncommenting this
>// Or with silent @ we can let it fail every sunsequent time ;-)
>
>$q = <<<CREATE
>create table pix (
> pid int primary key not null auto_increment,
> title text,
> imgdata longblob)
>CREATE;
>@mysql_query($q);
That is SUCH a bad idea.
>
>// Insert any new image into database
>
>if ($_REQUEST[completed] == 1) {
> // Need to add - check for large upload. Otherwise the code
> // will just duplicate old file ;-)
> // ALSO - note that latest.img must be public write and in a
> // live appliaction should be in another (safe!) directory.
> move_uploaded_file($_FILES['imagefile']
>['tmp_name'],"latest.img");
> $instr = fopen("latest.img","rb");
> $image = addslashes(fread($instr,filesize("latest.img")));
> if (strlen($instr) < 149000) {
> mysql_query ("insert into pix (title, imgdata) values
>(\"".
> $_REQUEST[whatsit].
> "\", \"".
> $image.
> "\")");
> } else {
> $errmsg = "Too large!";
> }
>}
completed and whatsit are constants? Probably not. Try 'completed'
and 'whatsit'.
>
>// Find out about latest image
>
>$gotten = @mysql_query("select * from pix order by pid desc limit 1");
>if ($row = @mysql_fetch_assoc($gotten)) {
> $title = htmlspecialchars($row[title]);
> $bytes = $row[imgdata];
>} else {
> $errmsg = "There is no image in the database yet";
> $title = "no database image available";
> // Put up a picture of our training centre
> $instr = fopen("../wellimg/ctco.jpg","rb");
> $bytes = fread($instr,filesize("../wellimg/ctco.jpg"));
>}
>
>// If this is the image request, send out the image
>
>if ($_REQUEST[gim] == 1) {
> header("Content-type: image/jpeg");
> print $bytes;
> exit ();
> }
>?>
again, 'gim' not gim.
>
><html>
><head>
><title>Upload an image to a database</title>
><body bgcolor=white><h2>Here's the latest picture</h2>
><font color=red><?= $errmsg ?></font>
><center><img src=?gim=1 width=144><br>
><b><?= $title ?></center>
><hr>
><h2>Please upload a new picture and title</h2>
><form enctype=multipart/form-data method=post>
><input type=hidden name=MAX_FILE_SIZE value=150000>
><input type=hidden name=completed value=1>
>Please choose an image to upload: <input type=file name=imagefile><br>
>Please enter the title of that picture: <input name=whatsit><br>
>then: <input type=submit></form><br>
><hr>
>By Graham Ellis - graham@wellho.net
></body>
></html>
I highly recommend against lazy. Do <?php not <?
--
gburnore at DataBasix dot Com
---------------------------------------------------------------------------
How you look depends on where you go.
---------------------------------------------------------------------------
Gary L. Burnore | ÝÛ³ºÝ³Þ³ºÝ³³Ýۺݳ޳ºÝ³Ý³Þ³ºÝ³ÝÝÛ³
| ÝÛ³ºÝ³Þ³ºÝ³³Ýۺݳ޳ºÝ³Ý³Þ³ºÝ³ÝÝÛ³
Official .sig, Accept no substitutes. | ÝÛ³ºÝ³Þ³ºÝ³³Ýۺݳ޳ºÝ³Ý³Þ³ºÝ³ÝÝÛ³
| ÝÛ 0 1 7 2 3 / Ý³Þ 3 7 4 9 3 0 Û³
Black Helicopter Repair Services, Ltd.| Official Proof of Purchase
===========================================================================
[Back to original message]
|